last executing test programs: 3.959416251s ago: executing program 0 (id=1): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 3.896892406s ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000180)=0x80, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='tick_stop\x00', r5, 0x0, 0x6}, 0x18) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa0400d1e048716e0800000000200000000000119078000000000000000044040a8100004e2000089078"], 0x0) 3.886931716s ago: executing program 4 (id=5): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x80000, 0x9e7fb34) 3.870215198s ago: executing program 3 (id=4): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80041285, &(0x7f0000001080)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x20, 0xacc3, 0x8, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x66, 0x0, 0x9, 0x4, 0x0, @empty, @remote, {[@generic={0x82, 0x5, "f404907c5502675e42"}, @ssrr={0x89, 0x7, 0x8e, [@empty]}, @timestamp={0x44, 0x8, 0xac, 0x0, 0x6, [0x2]}, @ssrr={0x89, 0x1b, 0xf5, [@initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1, @multicast2, @loopback, @multicast2, @rand_addr=0x64010101]}, @lsrr={0x83, 0x3, 0xd7}, @timestamp={0x44, 0x20, 0xa8, 0x0, 0x6, [0x8, 0x2, 0x80, 0x8, 0xd3, 0x0, 0xa825]}]}}}}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2a0, 0x268, 0x300, 0x0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e21, 0xd9, 0x1, 0x5, 0x5b, 0x6}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@nombcache}, {}, {@grpjquota}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001008, 0x0, 0x1, 0x0, 0x0) 2.433889854s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000003c0)="590c6fb4e3aac7f168d1e00d1c960da3b5143a554693b824aba25390765066f565054f26ee3dffe1b742d3ce9e68cb769368efff2c86da77ea", 0x39, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$netlink(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.559596824s ago: executing program 0 (id=6): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80080, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) setitimer(0x1, 0x0, 0x0) 1.369374579s ago: executing program 1 (id=7): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0xfffffffffffffffe, 0x0, {{0x5, 0x3, 0x8, 0x2, 0xfffffffc, 0x2, {0x9, 0x1, 0x4, 0x0, 0x10, 0xe, 0x80000000, 0x3, 0x81, 0x0, 0xb, 0x0, 0x0, 0xfffffffd, 0x9}}, {0x0, 0x2}}}, 0xa0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) fspick(r3, &(0x7f0000000180)='./file0\x00', 0x0) getdents64(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[], 0x0, 0x234, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 904.999587ms ago: executing program 3 (id=8): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0x0) 209.342142ms ago: executing program 0 (id=9): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000380)=""/253, 0x9000, 0x800, 0x3}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="010226000000000000140000f64f9ec9c97d"], 0x18}}, 0x80) sendmsg$FOU_CMD_GET(r4, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000c7b2dcacc5da200ac9ca970200b00ab4ac0aa167fcb86a1811e4c90ee152510ade82bc7d715fcdaf80ab45205c5aac91667d69d79e598c962c955cc032425c7f7476686ca973", @ANYRES16=r6, @ANYBLOB="00082bbd7000fedbdf2503000000050002000a00000006000a004e20000014000900fc020000000000000000000000000000060001004e24000006000a004e240000050002000200000008000800ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x24040811}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0xf) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) close(r9) write$cgroup_type(r10, &(0x7f0000000280), 0x9) 201.600423ms ago: executing program 2 (id=10): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02163c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, &(0x7f00000002c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x7fffffffffffffff, 0x3fffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x14a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20000009cd5977ae9c886dd602e5cea01143c0020010000000000000000000000000000ff020000000000000000000000000001001500000000000007500000000112090155434836249925ef00d2850000000000000000040000000000090000000000000008000000000000000500000000000000000000000000000005000000000000000800000000000000c9"], 0x0) 0s ago: executing program 4 (id=11): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80080, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) setitimer(0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 41.594876][ T24] audit: type=1400 audit(1756358061.790:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.595874][ T267] cgroup: Unknown subsys name 'net' [ 41.617999][ T24] audit: type=1400 audit(1756358061.790:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.645745][ T24] audit: type=1400 audit(1756358061.820:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.645924][ T267] cgroup: Unknown subsys name 'devices' [ 41.911408][ T267] cgroup: Unknown subsys name 'hugetlb' [ 41.917199][ T267] cgroup: Unknown subsys name 'rlimit' [ 42.205692][ T24] audit: type=1400 audit(1756358062.400:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.229644][ T24] audit: type=1400 audit(1756358062.400:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.256530][ T24] audit: type=1400 audit(1756358062.400:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.258929][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.289854][ T24] audit: type=1400 audit(1756358062.490:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.315691][ T24] audit: type=1400 audit(1756358062.490:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.345782][ T24] audit: type=1400 audit(1756358062.540:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.371886][ T24] audit: type=1400 audit(1756358062.540:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.401353][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.174100][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.181428][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.188891][ T275] device bridge_slave_0 entered promiscuous mode [ 44.196083][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.203245][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.210792][ T275] device bridge_slave_1 entered promiscuous mode [ 44.317350][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.324717][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.332052][ T277] device bridge_slave_0 entered promiscuous mode [ 44.348208][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.355400][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.362991][ T279] device bridge_slave_0 entered promiscuous mode [ 44.369970][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.377186][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.384789][ T277] device bridge_slave_1 entered promiscuous mode [ 44.401044][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.408088][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.415507][ T279] device bridge_slave_1 entered promiscuous mode [ 44.432765][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.440052][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.447452][ T276] device bridge_slave_0 entered promiscuous mode [ 44.456357][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.463416][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.470939][ T276] device bridge_slave_1 entered promiscuous mode [ 44.479129][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.486376][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.493733][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.500876][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.530956][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.538017][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.545646][ T278] device bridge_slave_0 entered promiscuous mode [ 44.553061][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.560395][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.568009][ T278] device bridge_slave_1 entered promiscuous mode [ 44.664884][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.672320][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.679704][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.687177][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.710341][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.717730][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.725401][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.732540][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.744475][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.751804][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.759894][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.767078][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.774745][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.781928][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.789389][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.796881][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.823445][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.831845][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.839122][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.847304][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.856074][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.863141][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.882024][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.895052][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.916978][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.933692][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.943043][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.951653][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.958748][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.967099][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.974587][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.983368][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.991828][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.998971][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.012148][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.020591][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.027727][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.036109][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.044496][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.051678][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.063555][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.072555][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.081190][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.088317][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.096832][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.105283][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.112439][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.121703][ T275] device veth0_vlan entered promiscuous mode [ 45.132001][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.139860][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.148269][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.156736][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.164024][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.172861][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.188464][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.196055][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.203783][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.212138][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.220369][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.228349][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.250267][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.258758][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.267666][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.274905][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.283439][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.291957][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.300465][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.308433][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.316540][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.325002][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.333409][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.341665][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.349954][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.358376][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.366877][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.375545][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.385720][ T275] device veth1_macvtap entered promiscuous mode [ 45.401938][ T278] device veth0_vlan entered promiscuous mode [ 45.414483][ T276] device veth0_vlan entered promiscuous mode [ 45.421331][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.429246][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.438469][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.447031][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.455648][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.464076][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.472337][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.480277][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.488217][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.496498][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.504603][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.512722][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.520260][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.527599][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.535114][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.546212][ T278] device veth1_macvtap entered promiscuous mode [ 45.561093][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.569398][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.577936][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.586419][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.594229][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.603218][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.612108][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.620013][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.628114][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.635710][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.650869][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.659399][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.669326][ T277] device veth0_vlan entered promiscuous mode [ 45.680707][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.689168][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.697964][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.706173][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.719088][ T276] device veth1_macvtap entered promiscuous mode [ 45.727563][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.735198][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.743568][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.752586][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.761094][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.769869][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.778278][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.786833][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.800466][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.808623][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.817404][ T279] device veth0_vlan entered promiscuous mode [ 45.832847][ T275] request_module fs-gadgetfs succeeded, but still no fs? [ 45.843140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.852723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.861813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.871311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.880780][ T277] device veth1_macvtap entered promiscuous mode [ 45.889108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.897215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.905787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.919881][ T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 45.925604][ T279] device veth1_macvtap entered promiscuous mode [ 45.951702][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.962685][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.971427][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.979200][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.989460][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.033776][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.153985][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.170483][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.194707][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.399618][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 47.399630][ T24] audit: type=1400 audit(1756358066.960:104): avc: denied { read write } for pid=306 comm="syz.3.4" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 47.534565][ T315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.547787][ T315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.557904][ T315] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 47.585407][ T24] audit: type=1400 audit(1756358066.960:105): avc: denied { open } for pid=306 comm="syz.3.4" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.274571][ T24] audit: type=1400 audit(1756358067.920:106): avc: denied { map_read map_write } for pid=304 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.295250][ T24] audit: type=1400 audit(1756358067.930:107): avc: denied { prog_run } for pid=304 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.314204][ T24] audit: type=1400 audit(1756358067.930:108): avc: denied { name_bind } for pid=304 comm="syz.2.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 48.369809][ T24] audit: type=1400 audit(1756358068.090:109): avc: denied { write } for pid=317 comm="syz.1.2" name="/" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.395483][ T24] audit: type=1400 audit(1756358068.090:110): avc: denied { remove_name } for pid=317 comm="syz.1.2" name="file0" dev="incremental-fs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.426216][ T24] audit: type=1400 audit(1756358068.090:111): avc: denied { rename } for pid=317 comm="syz.1.2" name="file0" dev="incremental-fs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.464447][ T24] audit: type=1400 audit(1756358068.090:112): avc: denied { reparent } for pid=317 comm="syz.1.2" name="file0" dev="incremental-fs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.532830][ T279] ------------[ cut here ]------------ [ 48.556495][ T328] syz.0.6 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.590735][ T279] WARNING: CPU: 0 PID: 279 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 48.657409][ T279] Modules linked in: [ 48.689386][ T279] CPU: 0 PID: 279 Comm: syz-executor Not tainted 5.10.240-syzkaller #0 [ 48.786408][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 48.803377][ T24] audit: type=1400 audit(1756358068.090:113): avc: denied { add_name } for pid=317 comm="syz.1.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.883099][ T279] RIP: 0010:drop_nlink+0xc5/0x110 [ 48.924963][ T279] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 83 23 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb 31 b8 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 49.095421][ T279] RSP: 0018:ffffc90000c47ce8 EFLAGS: 00010293 [ 49.118690][ T279] RAX: ffffffff81ab6e85 RBX: ffff88810e58ef80 RCX: ffff88811daaa780 [ 49.149589][ T279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.180214][ T279] RBP: ffffc90000c47d10 R08: 0000000000000004 R09: 0000000000000003 [ 49.614530][ T279] R10: fffff52000188f8c R11: 1ffff92000188f8c R12: dffffc0000000000 [ 49.645533][ T279] R13: 1ffff11021cb1df9 R14: ffff88810e58efc8 R15: 0000000000000000 [ 49.712827][ T279] FS: 0000555564de7500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 49.728048][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.737774][ T279] CR2: 00007ffd9c6c5798 CR3: 0000000126110000 CR4: 00000000003506b0 [ 49.746488][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.754966][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.763470][ T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 49.771235][ T279] Call Trace: [ 49.774546][ T279] shmem_rmdir+0x5b/0x90 [ 49.784998][ T340] syz.0.9[340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.785059][ T340] syz.0.9[340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.837526][ T279] vfs_rmdir+0x1b3/0x3e0 [ 49.853469][ T279] incfs_kill_sb+0xfe/0x210 [ 49.858087][ T279] deactivate_locked_super+0xa0/0x100 [ 49.863833][ T279] deactivate_super+0xaf/0xe0 [ 49.868703][ T279] cleanup_mnt+0x446/0x500 [ 49.873510][ T279] __cleanup_mnt+0x19/0x20 [ 49.878020][ T279] task_work_run+0x127/0x190 [ 49.882800][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 49.888481][ T279] syscall_exit_to_user_mode+0x68/0x90 [ 49.935658][ T279] do_syscall_64+0x3d/0x40 [ 49.953436][ T345] 9pnet: Insufficient options for proto=fd [ 49.970463][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.976680][ T279] RIP: 0033:0x7fcd70beaf17 [ 49.982073][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 50.002980][ T279] RSP: 002b:00007ffcc3c688a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 50.012194][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcd70beaf17 [ 50.038451][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc3c68960 [ 50.047464][ T279] RBP: 00007ffcc3c68960 R08: 0000000000000000 R09: 0000000000000000 [ 50.057174][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc3c699f0 [ 50.066346][ T279] R13: 00007fcd70c6cc05 R14: 000000000000bd2e R15: 00007ffcc3c69a30 [ 50.114199][ T279] ---[ end trace bec8003044c69dbb ]--- [ 50.120738][ T279] ================================================================== [ 50.129360][ T279] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 50.135702][ T279] Write of size 4 at addr 0000000000000170 by task syz-executor/279 [ 50.144104][ T279] [ 50.146451][ T279] CPU: 0 PID: 279 Comm: syz-executor Tainted: G W 5.10.240-syzkaller #0 [ 50.156258][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 50.166495][ T279] Call Trace: [ 50.170164][ T279] __dump_stack+0x21/0x24 [ 50.174675][ T279] dump_stack_lvl+0x169/0x1d8 [ 50.179747][ T279] ? thaw_kernel_threads+0x220/0x220 [ 50.185147][ T279] ? show_regs_print_info+0x18/0x18 [ 50.190496][ T279] ? _raw_spin_lock+0x8e/0xe0 [ 50.195176][ T279] ? _raw_spin_trylock_bh+0x130/0x130 [ 50.200565][ T279] ? ihold+0x20/0x60 [ 50.204483][ T279] kasan_report+0xd8/0x130 [ 50.209124][ T279] ? ihold+0x20/0x60 [ 50.213044][ T279] kasan_check_range+0x280/0x290 [ 50.218162][ T279] __kasan_check_write+0x14/0x20 [ 50.223317][ T279] ihold+0x20/0x60 [ 50.227495][ T279] vfs_rmdir+0x247/0x3e0 [ 50.231978][ T279] incfs_kill_sb+0xfe/0x210 [ 50.236498][ T279] deactivate_locked_super+0xa0/0x100 [ 50.242422][ T279] deactivate_super+0xaf/0xe0 [ 50.247222][ T279] cleanup_mnt+0x446/0x500 [ 50.251642][ T279] __cleanup_mnt+0x19/0x20 [ 50.256167][ T279] task_work_run+0x127/0x190 [ 50.260898][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 50.266459][ T279] syscall_exit_to_user_mode+0x68/0x90 [ 50.272145][ T279] do_syscall_64+0x3d/0x40 [ 50.276674][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.282920][ T279] RIP: 0033:0x7fcd70beaf17 [ 50.287583][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 50.308301][ T279] RSP: 002b:00007ffcc3c688a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 50.316990][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcd70beaf17 [ 50.325159][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc3c68960 [ 50.333145][ T279] RBP: 00007ffcc3c68960 R08: 0000000000000000 R09: 0000000000000000 [ 50.341218][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc3c699f0 [ 50.349193][ T279] R13: 00007fcd70c6cc05 R14: 000000000000bd2e R15: 00007ffcc3c69a30 [ 50.357169][ T279] ================================================================== [ 50.365227][ T279] Disabling lock debugging due to kernel taint [ 50.377128][ T279] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 50.385426][ T279] #PF: supervisor write access in kernel mode [ 50.392233][ T279] #PF: error_code(0x0002) - not-present page [ 50.398753][ T279] PGD 10e47f067 P4D 10e47f067 PUD 0 [ 50.404603][ T279] Oops: 0002 [#1] PREEMPT SMP KASAN [ 50.409890][ T279] CPU: 1 PID: 279 Comm: syz-executor Tainted: G B W 5.10.240-syzkaller #0 [ 50.419762][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 50.430025][ T279] RIP: 0010:ihold+0x26/0x60 [ 50.434521][ T279] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 01 2a b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 70 1b f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 50.454658][ T279] RSP: 0018:ffffc90000c47d28 EFLAGS: 00010246 [ 50.460811][ T279] RAX: ffff88811daaa700 RBX: 0000000000000000 RCX: 0000000000000286 [ 50.468864][ T279] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 50.477017][ T279] RBP: ffffc90000c47d38 R08: 0000000000000004 R09: 0000000000000003 [ 50.485407][ T279] R10: fffffbfff0d8ec48 R11: 1ffffffff0d8ec48 R12: 1ffff1102364c8b0 [ 50.493582][ T279] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 50.501719][ T279] FS: 0000555564de7500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 50.510649][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.517491][ T279] CR2: 0000000000000170 CR3: 0000000126110000 CR4: 00000000003506a0 [ 50.525570][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.533540][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.541740][ T279] Call Trace: [ 50.545230][ T279] vfs_rmdir+0x247/0x3e0 [ 50.549460][ T279] incfs_kill_sb+0xfe/0x210 [ 50.553972][ T279] deactivate_locked_super+0xa0/0x100 [ 50.559668][ T279] deactivate_super+0xaf/0xe0 [ 50.564696][ T279] cleanup_mnt+0x446/0x500 [ 50.569553][ T279] __cleanup_mnt+0x19/0x20 [ 50.574355][ T279] task_work_run+0x127/0x190 [ 50.579053][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 50.584615][ T279] syscall_exit_to_user_mode+0x68/0x90 [ 50.590408][ T279] do_syscall_64+0x3d/0x40 [ 50.594966][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.601243][ T279] RIP: 0033:0x7fcd70beaf17 [ 50.605858][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 50.626013][ T279] RSP: 002b:00007ffcc3c688a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 50.634858][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcd70beaf17 [ 50.642822][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc3c68960 [ 50.650959][ T279] RBP: 00007ffcc3c68960 R08: 0000000000000000 R09: 0000000000000000 [ 50.659374][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc3c699f0 [ 50.667911][ T279] R13: 00007fcd70c6cc05 R14: 000000000000bd2e R15: 00007ffcc3c69a30 [ 50.676053][ T279] Modules linked in: [ 50.680033][ T279] CR2: 0000000000000170 [ 50.684353][ T279] ---[ end trace bec8003044c69dbc ]--- [ 50.690328][ T279] RIP: 0010:ihold+0x26/0x60 [ 50.694820][ T279] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 01 2a b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 70 1b f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 50.714870][ T279] RSP: 0018:ffffc90000c47d28 EFLAGS: 00010246 [ 50.721556][ T279] RAX: ffff88811daaa700 RBX: 0000000000000000 RCX: 0000000000000286 [ 50.729752][ T279] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 50.737801][ T279] RBP: ffffc90000c47d38 R08: 0000000000000004 R09: 0000000000000003 [ 50.745765][ T279] R10: fffffbfff0d8ec48 R11: 1ffffffff0d8ec48 R12: 1ffff1102364c8b0 [ 50.753951][ T279] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 50.762204][ T279] FS: 0000555564de7500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 50.771134][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.777903][ T279] CR2: 0000000000000170 CR3: 0000000126110000 CR4: 00000000003506a0 [ 50.785961][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.794041][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.802203][ T279] Kernel panic - not syncing: Fatal exception [ 50.808685][ T279] Kernel Offset: disabled [ 50.813027][ T279] Rebooting in 86400 seconds..